DigiCert admits 16-month security lapse exposed customer information
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
DigiCert, a certificate authority, says a February 2025 server migration left an internal archive exposed to the public internet for over 16 months, letting an unauthorized user reach customer records including names, contact details, and possibly passports and driver's licenses.